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IN THE CLAIMS 

Please cancel claims 1-6, 8, 18-22, 24-25 and 27 without prejudice or 
disclaimer. 

Please amend claims 7, 23 and 26 as indicated below. 
Listing of Claims: 

Claims 1-6 (cancelled) 

Claim 7 (currently amended) The method as recited in claim 6 7 In a data processing 
system, a method comprising the steps of: 

creating a migratable storage tree with a storage root key: 

creating a non migratable storage tree with the storage root key, wherein the 
migratable storage tree and the non mi gratable storage tree are identically structured: 

requesting a migratable storage key; and 

requesting a non migratable storage key: 

wherein the step of requesting a migratable storage key will identify a parent 
key in the migratable storage tree, and wherein the step of requesting a non 
migratable storage key will identify a parent key in the non migratable storage tree 
that corresponds to the parent key in the migratable storage tree. 

Claim 8 (cancelled) 

Claim 9 (original) In a data processing system, a method comprising the steps of: 

splitting a request to create a new migratable storage key with given 

authentication data and a first parent key into first and second commands; 

wherein the first command creates a migratable storage key with the given 

authentication data and the first parent key; and 

wherein the second command requests creating a non-migratable storage key 

with the given authentication data and a second parent key which is determined from 

looking up a key that corresponds to the first parent key in a database. 
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Claim 10 (original) The method recited in claim 9, wherein the migratable storage 
key and the non migratable storage key are associated in a database. 

Claim 1 1 (original) The method recited in claim 9, wherein the non-migratable key is 
a multi-prime key. 

Claim 12 (original) The method recited in claim 9, where the non-migratable key is 
an elliptic curve key. 

Claim 13 (original) The method as recited in claim 9, further comprising the steps of: 
creating a new migratable signing key with the given authentication data and a 
third parent key; 

storing the new migratable signing key with the given authentication data and 
the third parent key; 

storing the new migratable signing key with the given authentication data and 
a fourth parent key where the fourth parent key is a non-migratable key associated 
with the third parent key in a database. 

Claim 14 (original) The method as recited in claim 13, further comprising the steps 
of: 

requesting a signature by the new migratable signing key; 
searching the database for the location of a key blob containing the new migratable 
signing key; 

loading a copy of the new migratable signing key stored in the key blob 
created with the non-migratable parent key; and 

signing with the new migratable signing key. 

Claim 15 (original) The method as recited in claim 9, further comprising the steps of: 
creating a new data stored by means of the first parent key; 
storing the new data with the first parent key; 

storing the new data with the second parent key where the second parent key 
is a non-migratable key associated with the third parent key in a database. 
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Claim 16 (original) The method as recited in claim 15, further comprising the steps 
of: 

requesting data stored by the new migratable storage key; 

searching the database for the location of a key blob associated with the new 
migratable storage key; 

loading a copy of the key blob created with the non-migratable storage key; 
and decrypting the data. 

Claim 17 (original) The method as recited in claim 14, further comprising the steps 
of: 

requesting migration of new migratable signing keys; 

searching the database for the location of a key blob associated with a non- 
migratable parent of the key to be migrated; 
processing the migration. 

Claims 18-22 (cancelled) 

Claim 23 (currently amended) The method aa recited in claim 4^ In a data 

processing system, a method comprising the steps of: 

creating a migratable storage tree with a storage root key: and 

creating a non-migratable storage tree with the storage rootkey where the 

migratable storage tree and the non-migratable storage tree are identically structured 

with corresponding keys and authentication data: 

wherein the non-migratable storage tree will include non-migratable storage 

keys corresponding to a subset of the migratable storage keys in the migratable 

storage tree. 

Claims 24-25 (cancelled) 

Claim 26 (currently amended) The method as recited in claim -2$-, In a data 
processing system, a method comprising the steps of: 

creating a migratable storage tree with a storage root kev: and 
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creating a non-migratable storage tree with the storage rootkey where the 
migratable storage tree and the non-migratable storage tree are identically structured 
with corresponding keys and authentication data; 

wherein use authorization in the non-migratable storage tree can be deduced 
from user authorization in the migratable storage tree with additional data: 

wherein the use authorization in the non-migratable storage tree is obtained by 
hashing the concatenation of the user authorization in the migratable storage tree with 
a fixed string. 

Claim 27 (cancelled) 
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